MAL-2025-178156 Malicious code in polymera-anasri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f230159a904a5c9908a33653eb5fcac3db22e5e68e2dab9e6c619b76fbc1ed4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176732 Malicious code in nuilva-buyvdia-manahayav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7390f1916e5378a2de1b6ad7b666e30b5a33508dbee146fe864565e3b57ce40c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177010 Malicious code in nuyar-adadar-bait (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2a08f105328f3de8484606a5918c23c8772b4945d434de1cf507318f8f0aacb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakaocil19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36f4ec8358200dd912c2441ad4b8e672c19aab9b259d55f1c4e48ac32b4c6844 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divata-tubi-iva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e60c7f8182c6ae131b97957328e0d2053411979a491fcb03a9923a34909bfb19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-faag-fnfdaosgsfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 253575088847e3c3af4964f9ef88c341de0b2e32473453cc8d16ff5b5e6d307f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-smoi-ugaha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71d6cad876c7e38e2f9cdf7974677a04373a89ee70d5713b1754ae079463d4e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abaah-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5762ccb3a5ff1dd79564adddd057d8586037b2ce3bd77eb735e3af21a5fc30c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anna-salwa-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a99818fee7cd0f2f61496468aa6b190495c8fa49efa03cf5c001016686997ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thumba-vss-budi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cee136da6640db075ebbb3ec4bf2b249a7b779ad4267711dbba3022b9eb56c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thambi-rafa-vgas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9991520e4b9b8dc2c4fe782f94021a513d300855ce2f8358859442b84167d33a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in digo-kaim-liamkiaayianor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd44ff43ef22c3a5e76549395d2b8fdcc391006e73454ebea37394eb962ea6a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahufarf-satud-fad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6a80f267e9861c3f330738b998b7bb7512154f7fb6060d1d71529ec55ffb316 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakaoci3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e86ad29ee13539b2fcffe030cbf0428e0bf313ef875f8463dd8f121bd2110f76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-butdayas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1481ec1ef05bb8513ca4c996626bbfe0f9d263005f61d1dba6d1ce07fb446c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanah-fipadsdfha-haufuh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2c39e919c429cf45441447e4e1b44e4ec1d1b2357c6019b05827913ad9e4436 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-asafui-datajuahu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28fbcee2604bf88987261a52aee35d4b2c860bbb4a85c58efa3d6a3ec810be7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogahh-faihaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3739a8aedc2efbffba87678db8e99a506491f76f79ebe362d12f257920ea5b8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-darde-fagafiaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdf1e924595a1c71c266651a4bc21fad33204a38143a99a98cf16e9232d7046c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thudmbi-vds-uylmii (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4c99b56c3f204acd90c3385cf13a365ca15d648bd153410b26150ac81382b94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...